diff --git a/openssh-9.9p1-sshd-no-delegate-credentials.patch b/openssh-9.9p1-sshd-no-delegate-credentials.patch index 59d0120..7132c9b 100644 --- a/openssh-9.9p1-sshd-no-delegate-credentials.patch +++ b/openssh-9.9p1-sshd-no-delegate-credentials.patch @@ -111,7 +111,7 @@ diff --color -ruNp a/sshd_config.5 b/sshd_config.5 .Cm yes . +.It Cm GSSAPIDelegateCredentials +Accept delegated credentials on the server side. The default is -+.CM yes . ++.Cm yes . .It Cm GSSAPIEnablek5users Specifies whether to look at .k5users file for GSSAPI authentication access control. Further details are described in diff --git a/openssh.spec b/openssh.spec index e2c0998..e61e5dc 100644 --- a/openssh.spec +++ b/openssh.spec @@ -750,6 +750,8 @@ test -f %{sysconfig_anaconda} && \ - Fix GSSAPI indicators check ignoring subsequent deny rules if allow rule matched first Resolves: RHEL-182151 +- Add default value for GSSAPIDelegateCredentials property in sshd_config manpage + Resolves: RHEL-211135 * Fri Jun 26 2026 Zoltan Fridrich - 9.9p1-27 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during